Name         : Triplex

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Clones       : No Clones 

     Symptoms     : No Symptoms

     Discovered   : 25-04-92

     Way to infect: Boot infection

     Rating       : Less Dangerous

     Kickstarts   : 1.2/1.3/2.0

     Damage       : Overwrites boot.

     Removal      : Install boot.

     Comments     : The TRIPLEX-Virus allocates 2048 bytes chipmem and
                    copies itself into this area. To stay resident the
                    virus changes the CoolCapture-Vector. After the next
                    restet the virus patches the DoIO()-Vector, too.
                    If you want to see the bootblock of an infected disk
                    the virus always shows you a normal Kickstart 1.3 BB.
                    This routine is also used in the LAMER-Viruses.
                    In the end of the bootblock you can read:

                    "This nice little virus was written in 1990 by"
                    "Darth Vader of TRIPLEX!!"



     SHI - A.D 08-94

[Go back]